The Association for Federal Enterprise Risk Management (AFERM) survey showed 66% of all respondents said their ERM program is led by a chief risk officer.